Vulnerabilities

Filters

2 selected

36 records

Sort

Vendor: TOTOLINK Component: Lr350 Firmware Clear all filters

TI-2026-04337 CVE-2026-4976 · GHSA-h682-387f-gvmv

Totolink LR350 cstecgi.cgi setWiFiGuestCfg buffer overflow

HIGH 73

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00666 Published 2026-03-27 No fix listed CWE-119

TI-2026-00886 CVE-2026-1158 · GHSA-27xh-5cf4-q5gc

Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow

HIGH 73

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00736 Published 2026-01-19 No fix listed CWE-119

TI-2026-00885 CVE-2026-1157 · GHSA-qc9v-jx78-g7ph

Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow

HIGH 73

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01007 Published 2026-01-19 No fix listed CWE-119

TI-2026-00884 CVE-2026-1156 · GHSA-fq4p-cjgq-frr7

Totolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflow

HIGH 73

A vulnerability was determined in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00736 Published 2026-01-19 No fix listed CWE-119

TI-2026-00883 CVE-2026-1155 · GHSA-8r46-76f5-pq4q

Totolink LR350 cstecgi.cgi setWiFiEasyGuestCfg buffer overflow

HIGH 73

A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00943 Published 2026-01-19 No fix listed CWE-119

TI-2026-00878 CVE-2026-1150 · GHSA-fv3r-wg9g-8ggf

Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection

MEDIUM 57

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.02636 Published 2026-01-19 No fix listed CWE-74

TI-2026-00877 CVE-2026-1149 · GHSA-m898-gr28-h7qx

Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection

MEDIUM 57

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03043 Published 2026-01-19 No fix listed CWE-74

TI-2025-39342 CVE-2025-63469 · GHSA-6mq9-274f-wm9p

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39341 CVE-2025-63468 · GHSA-pw8q-qg9v-4xmc

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the sub_426EF8 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39340 CVE-2025-63467 · GHSA-6jc3-vhwv-4rgh

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_425400 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39339 CVE-2025-63466 · GHSA-g78v-rm2r-hxw5

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39338 CVE-2025-63465 · GHSA-c3qq-7mg6-6r2x

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39337 CVE-2025-63464 · GHSA-pqmg-g7j2-2x57

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_42396C function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2025-39336 CVE-2025-63463 · GHSA-v656-w32r-m2jg

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 72

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2025-10-31 No fix listed CWE-121

TI-2024-09872 CVE-2024-10654 · GHSA-p3rq-f799-8pw3

TOTOLINK LR350 formLoginAuth.htm authorization

HIGH 70

A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01554 Published 2024-11-01 No fix listed CWE-266

TI-2024-28696 CVE-2024-42967 · GHSA-6cg9-52c8-r76r

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to…

HIGH 82

Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-bin/ExportSettings.sh…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00604 Published 2024-08-15 No fix listed CWE-284

TI-2024-06679 CVE-2024-7214 · GHSA-hcmc-j263-7qw5

TOTOLINK LR350 cstecgi.cgi setWanCfg command injection

MEDIUM 59

A vulnerability has been found in TOTOLINK LR350 9.3.5u.6369_B20220309 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03152 Published 2024-07-30 No fix listed CWE-77

TI-2024-24404 CVE-2024-36783 · GHSA-fvxx-vh2c-22pw

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via…

MEDIUM 52

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection via the host_time parameter in the NTPSyncWithHost function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01386 Published 2024-06-03 No fix listed CWE-77

TI-2024-23410 CVE-2024-35387

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

HIGH 82

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06071 Published 2024-05-24 No fix listed CWE-121

TI-2024-23199 CVE-2024-35099 · GHSA-p3rv-p6mh-g8xg

TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the…

MEDIUM 50

TOTOLINK LR350 V9.3.5u.6698_B20230810 was discovered to contain a stack overflow via the password parameter in the function loginAuth.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00843 Published 2024-05-13 No fix listed CWE-120

TI-2024-22666 CVE-2024-34308 · GHSA-grq5-cg54-wp35

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the…

MEDIUM 41

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0056 Published 2024-05-08 No fix listed CWE-121

TI-2023-18806 CVE-2023-37149 · GHSA-2h2h-9462-vxg8

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection…

HIGH 82

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2023-07-07 No fix listed CWE-77

TI-2023-18805 CVE-2023-37148 · GHSA-284g-6w8j-h2mp

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection…

HIGH 82

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2023-07-07 No fix listed CWE-77

TI-2023-18804 CVE-2023-37146 · GHSA-h3vp-h9rm-55x3

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection…

HIGH 82

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2023-07-07 No fix listed CWE-77

TI-2023-18803 CVE-2023-37145 · GHSA-c5cp-fjxp-f66q

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection…

HIGH 82

TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01958 Published 2023-07-07 No fix listed CWE-77